svn commit: lorikeet r699 - in trunk/heimdal: . cf doc kdc kuser lib/asn1 lib/des lib/des/imath lib/gssapi lib/hdb lib/hx509 lib/hx509/data lib/krb5 lib/roken tests tests/kdc

Andrew Bartlett abartlet at
Wed Jan 10 21:59:05 GMT 2007

On Wed, 2007-01-10 at 21:51 +0100, Love Hörnquist Åstrand wrote:
> > Yes, if this was an AS-REQ for a service directly, not for the the
> > krbtgt, then we would should lookup the krbtgt key separately, to fill
> > that in.
> What inital ticket services needs the PAC ? Does even the Windows KDC  
> fill in the
> PAC for non krbtgt AS requests ?

I've not checked, but if a service was set to require an initial tgt, I
presume this is how it should operate.  I suspect we need some tests...

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 
Samba Developer, Red Hat Inc.        
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :

More information about the samba-technical mailing list